Technical Leader Operational Security / DevSecOps – Senior

Project overview

Mission Context

As part of strengthening its cybersecurity measures, a major player in the banking sector is seeking a Technical Leader in Operational Security / DevSecOps to support a team dedicated to securing developments and application environments.

The mission is part of a continuous improvement approach for security practices, with challenges related to governance, industrialization of controls, and integration of cybersecurity into software development cycles.

The consultant will act as both a Level 3 technical referent and Product Owner, liaising with DevSecOps teams, business units, and various IT stakeholders.

Main Missions

• Evolve application security governance, particularly concerning code protection, APIs, AI components, and development cycles (SDLC).
• Structure and lead the DevSecOps team's product approach, anticipating the international expansion of the solution catalog.
• Support business and technical teams in adopting new application vulnerability management processes.
• Define and monitor performance indicators, dashboards, and security-related reporting.
• Participate in the development and improvement of security visibility and steering solutions, particularly around WIZ, Control Towers, and application health monitoring tools.
• Contribute to securing development cycles integrating agentic AI systems.
• Participate in the design and evolution of cybersecurity tools based on artificial intelligence.
• Ensure the application of security policies and standards, as well as the execution of compliance controls.
• Take part in security audits and ensure the follow-up of remediation plans and corrective actions.
• Provide technical expertise on security solutions, their integration, and their maintenance in operational conditions.
• Define best practices, technical standards, and recommendations to strengthen application security.
• Support technical teams in implementing security architectures and solutions.
• Maintain technological watch and propose improvements in security, performance, and operational efficiency.
• DevSecOps & SDLC: securing the development cycle, GitHub, integration of security controls.
• Application Security: SAST, DAST, API hardening, OAuth, vulnerability management.
• AI & Cybersecurity: AI applied to cybersecurity, securing agentic systems and associated developments.
• Tools & Steering: Jira, WIZ, security monitoring and reporting tools.
• Governance & Compliance: security policies, audits, controls, risk management, and remediation.
• Architecture & Expertise: design of security solutions, N3 support, and technical support for teams.

Project details

• Start: flexible
• Remote: hybrid
• Location: Croix, France, FR
• Rate: 88-88 EUR/h
• Languages: French